Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2017-8779 PoC — rpcbind 资源管理错误漏洞

Source
https://github.com/drbothen/GO-RPCBOMB
Associated Vulnerability
Title:rpcbind 资源管理错误漏洞 (CVE-2017-8779)
Description:rpcbind through 0.2.4, LIBTIRPC through 1.0.1 and 1.0.2-rc through 1.0.2-rc3, and NTIRPC through 1.4.3 do not consider the maximum RPC data size during memory allocation for XDR strings, which allows remote attackers to cause a denial of service (memory consumption with no subsequent free) via a crafted UDP packet to port 111, aka rpcbomb.
Description
CVE-2017-8779 aka RPCBomb
File Snapshot

 [4.0K]  /data/pocs/a2c76a180fd96fe766d4f8cd841404ee0db3e17c
├── [1.8K]  readme.md
└── [6.2K]  RPCBomb.go

0 directories, 2 files
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.
    3. Mirroring, verifying, and maintaining this POC archive takes ongoing effort, so local snapshots are a paid feature. Your subscription keeps the archive online — thank you for the support. View subscription plans →